for example two controller servers but only one of them which is running services, and in case this main server fails, the cloud switches to the other server.